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Amendments to the Claims : 
This listing of claims replaces all prior versions and listings of claims in the application: 

Listing of Claims : 

1 . (currently amended) A method for securing an accessible computer system, the 
method comprising: 

receiving [[a]] more than one data packet that each includes a payload portion and an 
attribute portion and [[is]] are communicated between at least one access requestor and at least 
one access provider; 

monitoring at least the payload portion of the data pack e t packets received by scanning 
the payload portion for at least one predetermined pattern and counting a number of data packets 
having payload portions that include the predetermined pattern ; and 

controlling denying access by the access requestor to the access provider wh e n th e 
payload portion is d e t e rmin e d to includ e at least on e pr e d e t e rmin e d patt e rn when a number of 
payload portions that include the predetermined pattern exceed a configurable threshold number . 

2. (cancelled). 

3. (currently amended) The method as in claim 1 wherein monitoring the data pack e t 
packets includes scanning the payload portion while handling the data pack e t packets with a 
switch. 

4. (currently amended) The method as in claim 3 wherein[[:]] 
r e c e iving the data pack e t includ e s r e c e iving mor e than on e data pack e t; and 
monitoring the data packet includes monitoring only at least one data packet that is 

distinguished. 
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5. (currently amended) The method as in claim 1 wherein: 
r e c e iving th e data pack e t includes r e c e iving mor e than on e data pack e t, 

securing the accessible computer system further comprises distinguishing at least one of 
the data packets from among the data packets received for additional processing, and 

monitoring the payload portion includes monitoring the payload portion of the at least 
one data packet distinguished. 

6. (original) The method as in claim 5 wherein the at least one data packet is 
distinguished based on an Internet address associated with the data packet. 

7. (currently amended) The method as in claim 1 wherein[[:]] 
r e c e iving th e data pack e t includ e s r e c e iving more than on e data pack e t; and 
monitoring the data packet includes monitoring all of the data packets received. 

8. (original) The method as in claim 1 wherein the access requestor is a client and the 
access provider is a host. 

9. (currently amended) The method as in claim 8 wherein the data pack e t is packets are 
monitored when communicated from the client to the host. 

10. (currently amended) The method as in claim 8 wherein the data pack e t is packets are 
monitored when communicated from the host to the client. 

1 1 . (original) The method as in claim 8 wherein the predetermined pattern includes a 
login failure message communicated from the host to the client. 
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12. (currently amended) The method as in claim 1 wherein the data pack e t includ e s 
packets include a token-based protocol packet, 

13. (currently amended) The method as in claim 1 wherein the data pack e t includ e s 
packets include a TCP packet. 

14. (currently amended) The method as in claim 1 wherein the data pack e t includ e s 
packets include a PPP packet. 

15. (cancelled). 

16. (currently amended) The method as in claim 1 wherein controlling denying access 
includes affecting bandwidth for communications between the access requestor and the access 
provider. 

17. (currently amended) The method as in claim 1 wh e r e in controlling access includes 
further comprising rerouting the access requestor. 

18. (cancelled). 

19. (currently amended) The method as in claim [[18]] 1 wherein controlling denying 
access by the access requestor to the access provider includes denying access by the access 
requestor to the access provider when a number of payload portions that include the 
predetermined pattern exceed a configurable threshold number during a configurable period of 
time. 

20. (currently amended) A system for securing an accessible computer system, 
comprising: 
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a receiving component that is structured and arranged to receive [[a]] more than one data 
packet that each includes a payload portion and an attribute portion and [[is]] are communicated 
between at least one access requestor and at least one access provider; 

a monitoring component that is structured and arranged to monitor at least the payload 
portion of the data pack e t packets received and includes a scanning component that is structured 
and arranged to scan the payload portion for at least one predetermined pattern and to count a 
number of data packets having payload portions that include the predetermined pattern ; and 

an access controlling component that is structured and arranged to control deny access by 
the access requestor to the access provider when th e payload portion is d e t e rmin e d to includ e at 
l e ast on e pr e det e rmin e d patt e rn a number of payload portions that include the predetermined 
pattern exceed a configurable threshold number . 

21. (cancelled). 

22. (currently amended) The system of claim 20 wherein the monitoring component 
includes a scanning component that is structured and arranged to scan the payload portion while 
handling the data pack e t packets with a switch. 

23. (currently amended) The system of claim 22 wherein[[:]] 

th e r e c e iving compon e nt is structur e d and arrang e d to r e c e iv e mor e than on e data pack e t; 

Ctrl 13 

the monitoring component is structured and arranged to monitor only at least one data 
packet that is distinguished. 

24. (currently amended) The system of claim 20 wherein: 

th e r e c e iving compon e nt is structur e d and arrang e d to r e ceiv e mor e than on e data pack e t, 
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the system further comprises a distinguishing component that is structured and arranged 
to distinguish at least one of the data packets from among the data packets received for additional 
processing, and 

the monitoring component is structured and arranged to monitor the payload portion of 
the at least one data packet distinguished. 

25. (original) The system of claim 24 wherein the at least one data packet is 
distinguished based on an Internet address associated with the data packet. 

26. (currently amended) The system of claim 20 wherein[[:]] 

th e r e c e iving compon e nt is structur e d and arranged to r e c e iv e mor e than on e data pack e t; 

Ullvl 

the monitoring component is structured and arranged to monitor all of the data packets 
received. 

27. (original) The system of claim 20 wherein the access requestor is a client and the 
access provider is a host. 

28. (currently amended) The system of claim 27 wherein the data pack e t is packets are 
monitored when communicated from the client to the host. 

29. (currently amended) The system of claim 27 wherein the data packet is packets are 
monitored when communicated from the host to the client. 

30. (original) The system of claim 27 wherein the predetermined pattern includes a login 
failure message communicated from the host to the client. 
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3 1 . (currently amended) The system of claim 20 wherein the data pack e t includ e s 
packets include a token-based protocol packet. 

32. (currently amended) The system of claim 20 wherein the data pack e t includes 
packets include a TCP packet. 

33. (currently amended) The system of claim 20 wherein the data pack e t includ e s 
packets include a PPP packet. 

34. (cancelled). 

35. (original) The system of claim 20 wherein the access controlling component is 
structured and arranged to affect bandwidth for communications between the access requestor 
and the access provider. 

36. (original) The system of claim 20 wherein the access controlling component is 
structured and arranged to reroute the access requestor. 

37. (cancelled). 

38. (currently amended) The system of claim [[37]] 20 wherein the access controlling 
component is structured and arranged to deny access by the access requestor to the access 
provider when a number of payload portions that include the predetermined pattern exceed a 
configurable threshold number during a configurable period of time. 

39. (currently amended) A computer program stored on a computer readable medium or 
a propagated signal for securing an accessible computer system, comprising: 
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a receiving code segment that causes the computer to receive [[a]] more than one data 
packet that each includes a payload portion and an attribute portion and [[is]] are communicated 
between at least one access requestor and at least one access provider; 

a monitoring code segment that causes the computer to monitor at least the payload 
portion of the data pack e t packets received and includes a scanning code segment that causes the 
computer to scan the payload portion for at least one predetermined pattern and to count a 
; number of data packets having payload portions that include the predetermined pattern ; and 

an access controlling code segment that causes the computer to control deny access by 
the access requestor to the access provider when th e payload portion is d e t e rmin e d to includ e at 
least on e pr e d e t e rmined patt e rn a number of payload portions that include the predetermined 
pattern exceed a configurable threshold number . 

40. (cancelled). 

41 . (currently amended) The computer program of claim 39 wherein the monitoring code 
segment includes a scanning code segment that causes the computer to scan the payload portion 
while handling the data pack e t packets with a switch. 

42. (currently amended) The computer program of claim 41 wherein[[:]] 

the r e c e iving cod e s e gm e nt caus e s th e comput e r to r e c e iv e mor e than one data packet; 

U11V1 

the monitoring code segment causes the computer to monitor only at least one data packet 
that is distinguished. 

43. (currently amended) The computer program of claim 39 wherein: 

th e r e c e iving cod e s e gm e nt caus e s th e comput e r to r e c e iv e mor e than on e data pack e t, 
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the computer program further comprises a distinguishing code segment that causes the 
; computer to distinguish at least one of the data packets from among the data packets received for 
additional processing, and 

the monitoring code segment causes the computer to monitor the payload portion of the at 
least one data packet distinguished. 

44. (original) The computer program of claim 43 wherein the at least one data packet is 
distinguished based on an Internet address associated with the data packet. 

45. (currently amended) The computer program of claim 39 wherein[[:]] 

th e r e c e iving cod e s e gm e nt caus e s th e comput e r to receiv e mor e than one data pack e t; 

111 111 

the monitoring code segment causes the computer to monitor all of the data packets 
received. 

46. (original) The computer program of claim 39 wherein the access requestor is a client 
and the access provider is a host. 

47. (currently amended) The computer program of claim 46 wherein the data pack e t is 
packets are monitored when communicated from the client to the host. 

48. (currently amended) The computer program of claim 46 wherein the data pack e t is 
packets are monitored when communicated from the host to the client. 



49. (original) The computer program of claim 46 wherein the predetermined pattern 
includes a login failure message communicated from the host to the client. 
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50. (currently amended) The computer program of claim 39 wherein the data pack e t 
includ e s packets include a token-based protocol packet. 

5 1 . (currently amended) The computer program of claim 39 wherein the pack e t includ e s 
packets include a TCP packet. 

52. (currently amended) The computer program of claim 39 wherein the data pack e t 
includ e s packets include a PPP packet. 

53. (cancelled). 

54. (original) The computer program of claim 39 wherein the access controlling code 
segment causes the computer to affect bandwidth for communications between the access 
requestor and the access provider. 

55. (original) The computer program of claim 39 wherein the access controlling code 
segment causes the computer to reroute the access requestor. 

56. (cancelled). 

57. (currently amended) The computer program of claim [[56]] 39 wherein the access 
controlling code segment causes the computer to deny access by the access requestor to the 
access provider when a number of pay load portions that include the predetermined pattern 
exceed a configurable threshold number during a configurable period of time. 



